@selesai/code 0.13.9 → 0.13.10

package/CHANGELOG.md

@@ -2,6 +2,15 @@
 
 All notable changes to `@selesai/code` will be documented in this file.
 
+## [0.13.10] - 2026-09-02
+
+### Added
+- **RPC rev-3 interactive-TUI parity batch.** New RPC commands `navigate_tree`, `list_sessions`, `rename_session`, `delete_session`, and `set_session_models`; new option fields for `prompt.queueWhileCompacting`, `cycle_model.direction`, `get_available_models.refresh`, and theme passthrough for `export_html`/`share_gist`.
+
+### Changed
+- **handoff-new carries the session name.** The new session started by `/handoff-new` (and RPC `handoff_new`) now inherits the current session's name as its starting name.
+- **pi-subagents uses only built-in agents.** The bundled pi-subagents extension now ships only the built-in agents (`advisor`, `delegate`, `oracle`, `researcher`, `reviewer`, `scout`, `worker`) and drops the custom agent definitions and Claude Code / Codex / Cursor agent adapters, so subagents work in any host without external CLIs.
+
 ## [0.13.9] - 2026-09-01
 
 ### Changed

package/dist/core/agent-session.d.ts

@@ -108,6 +108,12 @@ export type AgentSessionEvent = Exclude<AgentEvent, {
     delta: string;
 } | {
     type: "image_captioning_start";
+} | {
+    type: "session_tree";
+    newLeafId: string | null;
+    oldLeafId: string | null;
+    summaryEntry?: BranchSummaryEntry | null;
+    fromExtension?: boolean;
 } | {
     type: "image_captioning_end";
     ok: boolean;

package/dist/core/agent-session.js

@@ -2793,14 +2793,16 @@ export class AgentSession {
             // Update agent state
             const sessionContext = this.sessionManager.buildSessionContext();
             this.agent.state.messages = sessionContext.messages;
-            // Emit session_tree event
-            await this._extensionRunner.emit({
+            // Emit session_tree event (extension runners + RPC stdout subscribers)
+            const treeEvent = {
                 type: "session_tree",
                 newLeafId: this.sessionManager.getLeafId(),
                 oldLeafId,
                 summaryEntry,
                 fromExtension: summaryText ? fromExtension : undefined,
-            });
+            };
+            await this._extensionRunner.emit(treeEvent);
+            this._emit(treeEvent);
             // Emit to custom tools
             return { editorText, cancelled: false, summaryEntry };
         }

package/dist/extensions/handoff-new.test.ts

@@ -138,11 +138,13 @@ describe("handoff-new extension", () => {
 		model?: any;
 		customResult?: string | null;
 		mode?: string;
+		sessionName?: string;
 	} = {}) {
-		const calls: { newSession: any; userMessage: string | null; notify: { msg: string; kind: string }[] } = {
+		const calls: { newSession: any; userMessage: string | null; notify: { msg: string; kind: string }[]; setupName: string | null } = {
 			newSession: null,
 			userMessage: null,
 			notify: [],
+			setupName: null,
 		};
 		const ctx: any = {
 			mode: opts.mode ?? "tui",
@@ -150,6 +152,7 @@ describe("handoff-new extension", () => {
 			sessionManager: {
 				getBranch: () => (opts.branch === undefined ? [userEntry("we decided to build X")] : opts.branch),
 				getSessionFile: () => "/tmp/old.json",
+				getSessionName: () => opts.sessionName ?? undefined,
 			},
 			modelRegistry: {
 				async getApiKeyAndHeaders() {
@@ -165,6 +168,12 @@ describe("handoff-new extension", () => {
 			},
 			async newSession(options: any) {
 				calls.newSession = options;
+				if (options?.setup) {
+					const mgr: any = { named: [] as string[] };
+					mgr.appendSessionInfo = (name: string) => mgr.named.push(name);
+					await options.setup(mgr);
+					calls.setupName = mgr.named.at(-1) ?? null;
+				}
 				if (options?.withSession) {
 					await options.withSession(ctx);
 				}
@@ -183,6 +192,20 @@ describe("handoff-new extension", () => {
 		expect(calls.newSession.cancelled).toBeUndefined();
 	});
 
+	it("session name carries over to the new session", async () => {
+		const { commands } = createPiHarness();
+		const { ctx, calls } = createCtx({ sessionName: "db migration" });
+		await commands.get("handoff-new")!.handler("goal", ctx);
+		expect(calls.setupName).toBe("db migration");
+	});
+
+	it("no session name leaves the new session unnamed for auto-naming", async () => {
+		const { commands } = createPiHarness();
+		const { ctx, calls } = createCtx({ sessionName: undefined });
+		await commands.get("handoff-new")!.handler("goal", ctx);
+		expect(calls.setupName).toBeNull();
+	});
+
 	it("no goal arg uses DEFAULT_GOAL", async () => {
 		const { commands } = createPiHarness();
 		const { ctx, calls } = createCtx();
@@ -275,6 +298,7 @@ describe("handoff-new extension", () => {
 			sessionManager: {
 				getBranch: () => [userEntry("we decided to build X")],
 				getSessionFile: () => "/tmp/old.json",
+				getSessionName: () => undefined,
 			},
 			modelRegistry: {
 				async getApiKeyAndHeaders() {
@@ -372,6 +396,7 @@ describe("handoff-new extension", () => {
 			sessionManager: {
 				getBranch: () => [userEntry("we decided to build X")],
 				getSessionFile: () => "/tmp/old.json",
+				getSessionName: () => undefined,
 			},
 			modelRegistry: {
 				async getApiKeyAndHeaders() {

package/dist/extensions/handoff-new.ts

@@ -110,6 +110,11 @@ async function handoffNew(args: string, ctx: ExtensionCommandContext) {
 
 	const newSessionResult = await ctx.newSession({
 		parentSession: currentSessionFile,
+		// Carry the current session's name over to the new session as the starting point.
+		setup: (replacementManager) => {
+			const name = ctx.sessionManager.getSessionName();
+			if (name) replacementManager.appendSessionInfo(name);
+		},
 		withSession: async (replacementCtx) => {
 			await replacementCtx.sendUserMessage(result);
 		},

package/dist/extensions/pi-subagents/README.md

@@ -62,12 +62,6 @@ The extension ships with agents you can use immediately:
 | `reviewer` | Code review and small fixes against the task/plan, tests, edge cases, and simplicity. |
 | `oracle` | A second opinion before acting. Challenges assumptions without editing. |
 | `delegate` | A lightweight general delegate that behaves close to the parent session. |
-| `architect` | Read-only architecture and implementation planning. |
-| `builder` | Mutation-capable scoped implementation. |
-| `commentator` | Read-only evidence-based review. |
-| `explorer` | Read-only local codebase reconnaissance. |
-| `recapper` | Read-only handoff and context synthesis. |
-| `codex-exec`, `claude-code`, `cursor-agent` | External CLI runners with their own adapter contracts. |
 
 Rule of thumb: `scout` before you understand the code, `researcher` before you trust external facts, `worker` to implement, `reviewer` to check, and `oracle` when the decision itself feels risky.
 

package/dist/extensions/pi-subagents/docs/agents.md

@@ -59,120 +59,7 @@ The Pi async run remains the source of truth for status, artifacts, wake/wait, m
 
 External CLI agents use their own runner contract. Do not pass native Pi child options such as model override, structured output, acceptance/agent contract, tool budgets, fast mode, fork context, skills, or native Pi tools unless the adapter explicitly implements them.
 
-The built-in `codex-exec` and `codex-exec-writer` profiles are the supported Codex one-shot modes. Both require an installed and authenticated Codex CLI. The adapters own `codex exec --json` argv with ignored user config and rules, ephemeral sessions, approval policy `never`, and a final-message artifact.
-
-| Profile | Access | Sandbox |
-|---|---|---|
-| `codex-exec` | Read-only analysis | `read-only` |
-| `codex-exec-writer` | Explicit workspace edits | `workspace-write` |
-
-Neither adapter uses full access, approval or sandbox bypasses, automatic approval review, or additional writable roots. User profiles cannot add argv. The `codex-exec` selection identity is reserved for the read-only adapter.
-
-Run it asynchronously:
-
-```text
-Use codex-exec to analyze this change without editing files.
-
-Use codex-exec-writer to make the requested workspace changes.
-```
-
-The adapter validates `codex --version` and `codex exec --help` only when a run launches. Discovery, list, status, and native Pi launches do not probe Codex. JSONL, stderr, and stdout are untrusted. A run succeeds only after bounded valid JSONL contains one `turn.completed` event and the bounded final-message artifact is present.
-
-Maintainers can collect real smoke evidence without making it part of the normal test suite:
-
-```bash
-SELESAI_SUBAGENTS_CODEX_EXEC_SMOKE=1 \
-SELESAI_SUBAGENTS_CODEX_EXEC_SMOKE_REPORT=/tmp/pi-subagents-codex-exec-smoke.json \
-node --experimental-strip-types --import ./test/support/register-loader.mjs \
-  --test test/integration/codex-exec-smoke.test.ts
-
-SELESAI_SUBAGENTS_CODEX_EXEC_WRITER_SMOKE=1 \
-SELESAI_SUBAGENTS_CODEX_EXEC_WRITER_SMOKE_REPORT=/tmp/pi-subagents-codex-exec-writer-smoke.json \
-node --experimental-strip-types --import ./test/support/register-loader.mjs \
-  --test test/integration/codex-exec-writer-smoke.test.ts
-```
-
-The read-only smoke must report `writeCanaryExists: false`. The writer smoke must report `writeCanaryMatches: true`. Both reports include startup duration and terminal proof without raw protocol output, prompts, or credentials.
-
-The built-in `claude-code` and `claude-code-writer` profiles are the supported Claude Code one-shot modes. Both require an installed Claude Code CLI that is already authenticated through its normal local login. Claude Code 2.1.150 needs the user setting source for normal OAuth/keychain authentication, so both adapters load user settings but exclude project and local settings. User-level Claude Code settings and hooks are therefore an operator-trusted prerequisite. Review or disable unsafe user hooks before using either profile.
-
-| Profile | Access | Permission mode | Built-in tools |
-|---|---|---|---|
-| `claude-code` | Handoff-only read-only advice | `plan` | none |
-| `claude-code-writer` | Explicit workspace file edits | `acceptEdits` | `Read,Write,Edit,Glob,Grep` |
-
-Both adapters own `claude -p` argv with stream JSON, strict empty MCP configuration, user-only setting sources, no session persistence, disabled slash commands, and disabled Chrome integration. The writer mode does not include Bash or any permission bypass. Neither mode uses `--bare`, which does not read normal OAuth/keychain authentication. Neither mode requires `--safe-mode`, which is absent from the installed 2.1.150 help. User profiles cannot add argv. Selecting the code-owned `claude-code-writer` adapter identity is the only way to opt into its write tools; the read-only adapter cannot be widened with user argv.
-
-Run it asynchronously:
-
-```text
-Use claude-code to analyze this handoff without editing files.
-
-Use claude-code-writer to make the requested file changes.
-```
-
-The adapter validates `claude --version` and `claude --help` only when a run launches. Discovery, list, status, and native Pi launches do not probe Claude Code or authentication. JSONL, stderr, and stdout are untrusted. A run succeeds only after bounded valid JSONL contains exactly one successful terminal `result` with non-empty final text. Missing or revoked local authentication, limit stops, malformed JSON, duplicate terminal results, and EOF before a terminal result fail closed.
-
-Maintainers can opt in to separate read-only and writer canaries:
-
-```bash
-SELESAI_SUBAGENTS_CLAUDE_CODE_SMOKE=1 \
-SELESAI_SUBAGENTS_CLAUDE_CODE_SMOKE_REPORT=/tmp/pi-subagents-claude-code-smoke.json \
-node --experimental-strip-types --import ./test/support/register-loader.mjs \
-  --test test/integration/claude-code-smoke.test.ts
-
-SELESAI_SUBAGENTS_CLAUDE_CODE_WRITER_SMOKE=1 \
-SELESAI_SUBAGENTS_CLAUDE_CODE_WRITER_SMOKE_REPORT=/tmp/pi-subagents-claude-code-writer-smoke.json \
-node --experimental-strip-types --import ./test/support/register-loader.mjs \
-  --test test/integration/claude-code-writer-smoke.test.ts
-```
-
-Both smoke reports record `authentication: "existing-cli-required"`, `settingSources: "user"`, and `userSettingsTrust: "required"` without recording credential details. For read-only, confirm `terminalState` is `completed` and `writeCanaryExists` is `false`. For writer, confirm `terminalState` is `completed` and `writeCanaryMatches` is `true`. `durationMs` records cold process time. If authentication is missing or revoked, repair the normal local Claude Code login and rerun the smoke. Reports do not contain raw protocol output or credentials.
-
-The built-in `cursor-agent` and `cursor-agent-writer` profiles are the supported Cursor CLI one-shot modes. Both require an installed Cursor CLI and either `CURSOR_API_KEY` or an existing local login.
-
-| Profile | Access | Cursor mode |
-|---|---|---|
-| `cursor-agent` | Read-only analysis | `ask` |
-| `cursor-agent-writer` | Explicit workspace edits | non-interactive print |
-
-Both adapters use stream JSON, the enabled sandbox, and the primary workspace. They write the full handoff to a private `0600` file in a private temporary directory. Process argv contains only a short instruction with that path. The temporary directory is added as a workspace root only when it is outside the primary workspace. The prompt file and directory are removed after completion, failure, or stop.
-
-The adapters do not pass force, yolo, auto-review, MCP approval, plugin, session resume, continue, worktree, or workspace trust flags. User profiles cannot add argv or workspace roots. The `cursor-agent` selection identity is reserved for the read-only adapter.
-
-Launch preflight validates `cursor-agent --version` and `cursor-agent --help` only when a run starts. Discovery, list, status, and native Pi launches do not execute Cursor or probe authentication. A run succeeds only when bounded valid JSONL ends with one successful `result` event that has non-empty final text. Error events, failed results, malformed JSON, output after the terminal event, and EOF before a result fail closed.
-
-These headless smokes rely on saved workspace trust. Cursor documents no passive command that checks workspace trust, so the smoke cannot verify it before launch. The operator must use Cursor's interactive trust flow for the exact disposable workspace and the exact derived prompt directory, `<state-root>/external-0.cursor-prompt`. Keep that prompt directory after the trust step. It must be empty, owned by the operator who runs the smoke, and must not be a symlink. The harness preserves this directory but creates its private handoff with exclusive `0600` access and removes the handoff after every run. Repeat the trust setup if either exact path changes.
-
-The smoke requires two existing, separate operator-managed directories and an explicit disposable-workspace attestation:
-
-```bash
-export SELESAI_SUBAGENTS_CURSOR_SMOKE_WORKSPACE=/tmp/pi-subagents-cursor-smoke-workspace
-export SELESAI_SUBAGENTS_CURSOR_SMOKE_STATE_ROOT=/tmp/pi-subagents-cursor-smoke-state
-export SELESAI_SUBAGENTS_CURSOR_SMOKE_DISPOSABLE=1
-mkdir -p "$SELESAI_SUBAGENTS_CURSOR_SMOKE_WORKSPACE" "$SELESAI_SUBAGENTS_CURSOR_SMOKE_STATE_ROOT"
-mkdir -p "$SELESAI_SUBAGENTS_CURSOR_SMOKE_STATE_ROOT/external-0.cursor-prompt"
-```
-
-Do not place a file at `pi-subagents-cursor-write-canary.txt` in the workspace or any file, including `handoff.txt`, in the prompt directory. The harness refuses the pre-existing canary and any non-empty prompt directory. It does not delete the workspace, state root, or operator-owned prompt directory. It removes only its canary and private handoff file.
-
-Maintainers can then run separate read-only and writer canaries:
-
-```bash
-SELESAI_SUBAGENTS_CURSOR_AGENT_SMOKE=1 \
-SELESAI_SUBAGENTS_CURSOR_AGENT_SMOKE_REPORT=/tmp/pi-subagents-cursor-agent-smoke.json \
-node --experimental-strip-types --import ./test/support/register-loader.mjs \
-  --test test/integration/cursor-agent-smoke.test.ts
-
-SELESAI_SUBAGENTS_CURSOR_AGENT_WRITER_SMOKE=1 \
-SELESAI_SUBAGENTS_CURSOR_AGENT_WRITER_SMOKE_REPORT=/tmp/pi-subagents-cursor-agent-writer-smoke.json \
-node --experimental-strip-types --import ./test/support/register-loader.mjs \
-  --test test/integration/cursor-agent-writer-smoke.test.ts
-```
-
-The read-only smoke must report `writeCanaryExists: false`. The writer smoke must report `writeCanaryMatches: true`. Both reports record `workspaceTrust: "operator-managed-saved"`, confirm that the external prompt root was added, and include startup duration and terminal proof without raw protocol output, prompts, or credentials. A trust-required error remains terminal; the harness does not retry with a trust, force, or yolo flag.
-
-Native `oracle` runs inside Pi and can use its configured read tools. The Claude profiles send the assembled prompt to the local Claude Code CLI through stdin. An external-job agent sends the assembled prompt to its registered provider. Provider options and a prompt digest are persisted in Pi run state. The prompt text is delivered through the local host bridge to the provider and is not stored in the public result payload. Do not place secrets in advisory prompts unless the target provider is approved to receive them.
+The bundled code-owned external adapters (`codex-exec`, `claude-code`, `cursor-agent` and their writer variants) were removed in favor of the built-in Pi agents. A custom agent with `runner.type: external-cli` (no adapter) still runs the generic one-shot stdin contract: `command` is executed with the prompt on stdin, and the bounded final output is treated as untrusted text.
 
 ### External-job state table
 

package/dist/extensions/pi-subagents/src/agents/builtin-names.ts

@@ -1,20 +1,9 @@
 export const BUILTIN_AGENT_NAMES = [
-	"architect",
 	"advisor",
-	"builder",
-	"claude-code",
-	"claude-code-writer",
-	"codex-exec",
-	"codex-exec-writer",
-	"commentator",
-	"cursor-agent",
-	"cursor-agent-writer",
 	"delegate",
-	"explorer",
 	"oracle",
-	"recapper",
 	"researcher",
 	"reviewer",
 	"scout",
 	"worker",
-] as const;
+] as const;

package/dist/extensions/pi-subagents/src/extension/tool-description.ts

@@ -5,7 +5,7 @@ import { getAgentDir, getProjectConfigDir } from "../shared/utils.ts";
 
 const CUSTOM_TOOL_DESCRIPTION_FILE = "subagent-tool-description.md";
 const CUSTOM_TOOL_DESCRIPTION_MAX_BYTES = 50 * 1024;
-const EXTERNAL_CLI_RUNNER_GUIDANCE = "External CLI agents (codex-exec, codex-exec-writer, claude-code, claude-code-writer, cursor-agent, cursor-agent-writer) use their own runner contract and do not support native Pi child options such as model override, structured output, acceptance/agent contract, tool budget, fast mode, fork context, skills, or native Pi tools unless the runner explicitly implements them.";
+const EXTERNAL_CLI_RUNNER_GUIDANCE = "External CLI agents (custom external-cli runners; there are no bundled adapter agents) use their own runner contract and do not support native Pi child options such as model override, structured output, acceptance/agent contract, tool budget, fast mode, fork context, skills, or native Pi tools unless the runner explicitly implements them.";
 const WORKFLOW_RESUME_KEY_GUIDANCE = "Each workflow key identifies one result lane: use a new stable workflow key for every distinct retained resume pass; same-key calls are reused only when launch parameters are identical, and incompatible parameters are rejected.";
 const WORKFLOW_OUTPUT_BINDING_GUIDANCE = "For durable workflow child files, set output on runs.run/runs.all; task filename prose is not an output declaration, and return the child's outputReference, outputPathMapping, or artifactPaths instead of inventing a literal path.";
 const WORKFLOW_LANES_GUIDANCE = "For bounded parallel sequential chains, use runs.lanes([{key,stages:[{key,agent,task},{key,resume:'previous',task},...]}]); first stages run together, later stages sequence per lane, and the bounded board reports lane-local failures. Only an explicit structuredOutput.verdict === 'blocked' blocks a successful stage; reviewer prose is not parsed.";

package/dist/extensions/pi-subagents/src/runs/background/subagent-runner.ts

@@ -144,9 +144,6 @@ import { resolveWatchdogConfig } from "../../watchdog/settings.ts";
 import { createBoundedByteTail, createBoundedLineReader, formatProtocolOutputLimit, MAX_CHILD_STDERR_BYTES, PI_AGGREGATE_EVENT_PROJECTOR, projectChildLifecycle, type ChildLifecycleAction, type ChildLifecycleState, type ProtocolOutputLimit } from "../shared/child-protocol.ts";
 import { acquireSessionLease, type SessionLeaseRequest } from "../shared/session-lease.ts";
 import { buildExternalCliPrompt, runExternalCli } from "../shared/external-cli-runner.ts";
-import { resolveClaudeCodeLaunch } from "../shared/claude-code-adapter.ts";
-import { resolveCodexExecLaunch } from "../shared/codex-exec-adapter.ts";
-import { resolveCursorAgentLaunch } from "../shared/cursor-agent-adapter.ts";
 import { resolveExternalCliRunnerStatus } from "../shared/external-cli-contract.ts";
 import { runExternalJob } from "../shared/external-job-runner.ts";
 import { createOrcaProgressTab, type OrcaProgressTab } from "../shared/orca-progress-tabs.ts";
@@ -1480,28 +1477,15 @@ async function runSingleStepInner(
 
 	if (step.runner?.type === "external-cli") {
 		const externalCwd = step.cwd ?? ctx.cwd;
-		const adapterLaunch = step.runner.adapter === "codex-exec" || step.runner.adapter === "codex-exec-writer"
-			? resolveCodexExecLaunch({ adapter: step.runner.adapter, command: step.runner.command, asyncDir: path.dirname(ctx.outputFile), stepIndex: ctx.flatIndex })
-			: step.runner.adapter === "claude-code" || step.runner.adapter === "claude-code-writer"
-				? resolveClaudeCodeLaunch({ adapter: step.runner.adapter, command: step.runner.command })
-				: step.runner.adapter === "cursor-agent" || step.runner.adapter === "cursor-agent-writer"
-					? resolveCursorAgentLaunch({ adapter: step.runner.adapter, command: step.runner.command, cwd: externalCwd, asyncDir: path.dirname(ctx.outputFile), stepIndex: ctx.flatIndex })
-				: undefined;
-		const runner = resolveExternalCliRunnerStatus({ ...step.runner, ...(adapterLaunch ? { args: adapterLaunch.args } : {}) });
+		const runner = resolveExternalCliRunnerStatus({ ...step.runner });
 		const outputSnapshot = captureSingleOutputSnapshot(step.outputPath);
 		const external = await runExternalCli(omitUndefinedProperties({
-			command: adapterLaunch?.command ?? runner.command,
-			args: adapterLaunch?.args ?? runner.args,
+			command: runner.command,
+			args: runner.args,
 			cwd: externalCwd,
 			prompt: buildExternalCliPrompt(step.systemPrompt ?? "", task),
 			asyncDir: path.dirname(ctx.outputFile),
 			stepIndex: ctx.flatIndex,
-			environment: adapterLaunch?.environment,
-			preflight: adapterLaunch?.preflight,
-			parser: adapterLaunch?.parser,
-			finalOutputPath: adapterLaunch?.finalOutputPath,
-			promptFilePath: adapterLaunch?.promptFilePath,
-			temporaryDirectories: adapterLaunch?.temporaryDirectories,
 			registerTimeout: ctx.registerTimeout,
 			registerStop: ctx.registerStop,
 			timeoutMessage: ctx.timeoutMessage,

package/dist/extensions/pi-subagents/src/runs/shared/external-cli-contract.ts

@@ -22,43 +22,27 @@ const PROMPT_FILE_UNSUPPORTED = {
 	resume: "The one-shot prompt-file adapter does not retain a durable external session identity.",
 } as const;
 
-export const CODE_OWNED_EXTERNAL_CLI_ADAPTER_IDS = [
-	"codex-exec",
-	"codex-exec-writer",
-	"claude-code",
-	"claude-code-writer",
-	"cursor-agent",
-	"cursor-agent-writer",
-] as const;
+export const CODE_OWNED_EXTERNAL_CLI_ADAPTER_IDS = [] as const;
 export type CodeOwnedExternalCliAdapterId = typeof CODE_OWNED_EXTERNAL_CLI_ADAPTER_IDS[number];
 
 const CODE_OWNED_EXTERNAL_CLI_ADAPTER_ID_SET = new Set<string>(CODE_OWNED_EXTERNAL_CLI_ADAPTER_IDS);
-export const CODE_OWNED_EXTERNAL_CLI_ADAPTER_LABEL = CODE_OWNED_EXTERNAL_CLI_ADAPTER_IDS.map((id) => `'${id}'`).join(", ");
+export const CODE_OWNED_EXTERNAL_CLI_ADAPTER_LABEL = "(none)";
 
 export function isCodeOwnedExternalCliAdapterId(value: unknown): value is CodeOwnedExternalCliAdapterId {
 	return typeof value === "string" && CODE_OWNED_EXTERNAL_CLI_ADAPTER_ID_SET.has(value);
 }
 
-const RESERVED_READ_ONLY_ADAPTERS = [
-	{ name: "claude-code", writer: "claude-code-writer", access: "file-write" },
-	{ name: "codex-exec", writer: "codex-exec-writer", access: "workspace-write" },
-	{ name: "cursor-agent", writer: "cursor-agent-writer", access: "workspace-write" },
-] as const;
+const RESERVED_READ_ONLY_ADAPTERS = [] as const;
 
 export function validateCodeOwnedProfileRunner(
-	agent: {
+	_agent: {
 		name: string;
 		localName?: string;
 		aliases?: readonly string[];
 		runner?: { type: string; adapter?: string };
 	},
 ): string | undefined {
-	const selectionNames = [agent.name, ...(agent.localName ? [agent.localName] : []), ...(agent.aliases ?? [])];
-	for (const adapter of RESERVED_READ_ONLY_ADAPTERS) {
-		if (selectionNames.includes(adapter.name) && !(agent.runner?.type === "external-cli" && agent.runner.adapter === adapter.name)) {
-			return `Selection name '${adapter.name}' is reserved for the read-only '${adapter.name}' adapter. Use '${adapter.writer}' for explicit ${adapter.access} access.`;
-		}
-	}
+	// With no code-owned adapter profiles bundled, no selection names are reserved.
 	return undefined;
 }
 
@@ -81,26 +65,13 @@ export function resolveExternalCliRunnerStatus(input: {
 	promptDelivery?: "stdin";
 	capabilities?: ExternalCliCapabilityNarrowing;
 }): ExternalCliRunnerStatus {
-	const codexExec = input.adapter === "codex-exec";
-	const codexExecWriter = input.adapter === "codex-exec-writer";
-	const claudeCode = input.adapter === "claude-code";
-	const claudeCodeWriter = input.adapter === "claude-code-writer";
-	const cursorAgent = input.adapter === "cursor-agent";
-	const cursorAgentWriter = input.adapter === "cursor-agent-writer";
-	const cursor = cursorAgent || cursorAgentWriter;
-	const unsupported = cursor ? PROMPT_FILE_UNSUPPORTED : UNSUPPORTED;
+	const unsupported = UNSUPPORTED;
 	return {
 		type: "external-cli",
 		command: input.command,
 		args: input.args ?? [],
-		promptDelivery: cursor ? "prompt-file" : input.promptDelivery ?? "stdin",
-		adapter: { id: input.adapter ?? "external-cli", version: 1, executionMode: cursor ? "one-shot-prompt-file" : "one-shot-stdin" },
-		...(codexExec ? { safety: { sandbox: "read-only" as const, approvalPolicy: "never" as const, ephemeral: true as const } } : {}),
-		...(codexExecWriter ? { safety: { access: "workspace-write" as const, sandbox: "workspace-write" as const, approvalPolicy: "never" as const, ephemeral: true as const } } : {}),
-		...(claudeCode ? { safety: { access: "read-only" as const, authentication: "existing-cli-required" as const, permissionMode: "plan" as const, tools: "none" as const, mcp: "empty-strict" as const, settingSources: "user" as const, userSettingsTrust: "required" as const, sessionPersistence: false as const } } : {}),
-		...(claudeCodeWriter ? { safety: { access: "workspace-write" as const, authentication: "existing-cli-required" as const, permissionMode: "acceptEdits" as const, tools: "Read,Write,Edit,Glob,Grep" as const, mcp: "empty-strict" as const, settingSources: "user" as const, userSettingsTrust: "required" as const, sessionPersistence: false as const } } : {}),
-		...(cursorAgent ? { safety: { access: "read-only" as const, authentication: "cursor-api-key-or-existing-login" as const, mode: "ask" as const, sandbox: "enabled" as const, workspaceTrust: "existing-required" as const, sessionReuse: false as const } } : {}),
-		...(cursorAgentWriter ? { safety: { access: "workspace-write" as const, authentication: "cursor-api-key-or-existing-login" as const, mode: "print" as const, sandbox: "enabled" as const, workspaceTrust: "existing-required" as const, sessionReuse: false as const } } : {}),
+		promptDelivery: input.promptDelivery ?? "stdin",
+		adapter: { id: input.adapter ?? "external-cli", version: 1, executionMode: "one-shot-stdin" },
 		capabilities: {
 			stop: true,
 			steer: false,

package/dist/extensions/pi-subagents/src/shared/types.ts

@@ -1652,7 +1652,7 @@ export type AgentRunnerConfig =
 	| { type: "pi" }
 	| {
 		type: "external-cli";
-		adapter?: "codex-exec" | "codex-exec-writer" | "claude-code" | "claude-code-writer" | "cursor-agent" | "cursor-agent-writer";
+		adapter?: never;
 		command: string;
 		args?: string[];
 		promptDelivery?: "stdin";
@@ -1678,7 +1678,7 @@ export interface ExternalCliCapabilities {
 }
 
 export interface ExternalCliReceiptMetadata {
-	adapter: { id: "external-cli" | "codex-exec" | "codex-exec-writer" | "claude-code" | "claude-code-writer" | "cursor-agent" | "cursor-agent-writer" | "grok-build"; version: 1; executionMode: "one-shot-stdin" | "one-shot-prompt-file" };
+	adapter: { id: "external-cli" | "grok-build"; version: 1; executionMode: "one-shot-stdin" | "one-shot-prompt-file" };
 	capabilities: ExternalCliCapabilities;
 	safety?:
 		| { sandbox: "read-only"; approvalPolicy: "never"; ephemeral: true }

package/dist/extensions/pi-subagents/src/workflows/workflow-receipt.ts

@@ -127,7 +127,7 @@ function parseExternalCliReceiptMetadata(value: unknown, key: string, source: st
 	const adapterRecord = adapter as Record<string, unknown>;
 	const unknownAdapter = Object.keys(adapterRecord).filter((field) => !["id", "version", "executionMode"].includes(field));
 	if (unknownAdapter.length > 0) throw new Error(`${label}.adapter has unsupported fields: ${unknownAdapter.join(", ")}.`);
-	if ((adapterRecord.id !== "external-cli" && adapterRecord.id !== "codex-exec" && adapterRecord.id !== "codex-exec-writer" && adapterRecord.id !== "claude-code" && adapterRecord.id !== "claude-code-writer" && adapterRecord.id !== "cursor-agent" && adapterRecord.id !== "cursor-agent-writer" && adapterRecord.id !== "grok-build") || adapterRecord.version !== 1 || adapterRecord.executionMode !== (adapterRecord.id === "cursor-agent" || adapterRecord.id === "cursor-agent-writer" || adapterRecord.id === "grok-build" ? "one-shot-prompt-file" : "one-shot-stdin")) throw new Error(`${label}.adapter is invalid.`);
+	if ((adapterRecord.id !== "external-cli" && adapterRecord.id !== "grok-build") || adapterRecord.version !== 1 || adapterRecord.executionMode !== (adapterRecord.id === "grok-build" ? "one-shot-prompt-file" : "one-shot-stdin")) throw new Error(`${label}.adapter is invalid.`);
 	const capabilities = metadata.capabilities;
 	if (!capabilities || typeof capabilities !== "object" || Array.isArray(capabilities)) throw new Error(`${label}.capabilities must be an object.`);
 	const capabilityRecord = capabilities as Record<string, unknown>;
@@ -137,43 +137,7 @@ function parseExternalCliReceiptMetadata(value: unknown, key: string, source: st
 		if (capabilityRecord[capability] !== expected) throw new Error(`${label}.capabilities.${capability} is invalid.`);
 	}
 	const safety = metadata.safety;
-	if (adapterRecord.id === "codex-exec") {
-		if (!safety || typeof safety !== "object" || Array.isArray(safety)) throw new Error(`${label}.safety is missing.`);
-		const safetyRecord = safety as Record<string, unknown>;
-		const unknownSafety = Object.keys(safetyRecord).filter((field) => !["sandbox", "approvalPolicy", "ephemeral"].includes(field));
-		if (unknownSafety.length > 0) throw new Error(`${label}.safety has unsupported fields: ${unknownSafety.join(", ")}.`);
-		if (safetyRecord.sandbox !== "read-only" || safetyRecord.approvalPolicy !== "never" || safetyRecord.ephemeral !== true) throw new Error(`${label}.safety is invalid.`);
-	} else if (adapterRecord.id === "codex-exec-writer") {
-		if (!safety || typeof safety !== "object" || Array.isArray(safety)) throw new Error(`${label}.safety is missing.`);
-		const safetyRecord = safety as Record<string, unknown>;
-		const unknownSafety = Object.keys(safetyRecord).filter((field) => !["access", "sandbox", "approvalPolicy", "ephemeral"].includes(field));
-		if (unknownSafety.length > 0) throw new Error(`${label}.safety has unsupported fields: ${unknownSafety.join(", ")}.`);
-		if (safetyRecord.access !== "workspace-write" || safetyRecord.sandbox !== "workspace-write" || safetyRecord.approvalPolicy !== "never" || safetyRecord.ephemeral !== true) throw new Error(`${label}.safety is invalid.`);
-	} else if (adapterRecord.id === "claude-code") {
-		if (!safety || typeof safety !== "object" || Array.isArray(safety)) throw new Error(`${label}.safety is missing.`);
-		const safetyRecord = safety as Record<string, unknown>;
-		const legacy = safetyRecord.authentication === undefined;
-		const unknownSafety = Object.keys(safetyRecord).filter((field) => !(legacy
-			? ["permissionMode", "tools", "mcp", "settingSources", "sessionPersistence"]
-			: ["access", "authentication", "permissionMode", "tools", "mcp", "settingSources", "userSettingsTrust", "sessionPersistence"]).includes(field));
-		if (unknownSafety.length > 0) throw new Error(`${label}.safety has unsupported fields: ${unknownSafety.join(", ")}.`);
-		if (legacy) {
-			if (safetyRecord.permissionMode !== "plan" || safetyRecord.tools !== "none" || safetyRecord.mcp !== "empty-strict" || safetyRecord.settingSources !== "none" || safetyRecord.sessionPersistence !== false) throw new Error(`${label}.safety is invalid.`);
-		} else if (safetyRecord.access !== "read-only" || safetyRecord.authentication !== "existing-cli-required" || safetyRecord.permissionMode !== "plan" || safetyRecord.tools !== "none" || safetyRecord.mcp !== "empty-strict" || safetyRecord.settingSources !== "user" || safetyRecord.userSettingsTrust !== "required" || safetyRecord.sessionPersistence !== false) throw new Error(`${label}.safety is invalid.`);
-	} else if (adapterRecord.id === "claude-code-writer") {
-		if (!safety || typeof safety !== "object" || Array.isArray(safety)) throw new Error(`${label}.safety is missing.`);
-		const safetyRecord = safety as Record<string, unknown>;
-		const unknownSafety = Object.keys(safetyRecord).filter((field) => !["access", "authentication", "permissionMode", "tools", "mcp", "settingSources", "userSettingsTrust", "sessionPersistence"].includes(field));
-		if (unknownSafety.length > 0) throw new Error(`${label}.safety has unsupported fields: ${unknownSafety.join(", ")}.`);
-		if (safetyRecord.access !== "workspace-write" || safetyRecord.authentication !== "existing-cli-required" || safetyRecord.permissionMode !== "acceptEdits" || safetyRecord.tools !== "Read,Write,Edit,Glob,Grep" || safetyRecord.mcp !== "empty-strict" || safetyRecord.settingSources !== "user" || safetyRecord.userSettingsTrust !== "required" || safetyRecord.sessionPersistence !== false) throw new Error(`${label}.safety is invalid.`);
-	} else if (adapterRecord.id === "cursor-agent" || adapterRecord.id === "cursor-agent-writer") {
-		if (!safety || typeof safety !== "object" || Array.isArray(safety)) throw new Error(`${label}.safety is missing.`);
-		const safetyRecord = safety as Record<string, unknown>;
-		const unknownSafety = Object.keys(safetyRecord).filter((field) => !["access", "authentication", "mode", "sandbox", "workspaceTrust", "sessionReuse"].includes(field));
-		if (unknownSafety.length > 0) throw new Error(`${label}.safety has unsupported fields: ${unknownSafety.join(", ")}.`);
-		const writer = adapterRecord.id === "cursor-agent-writer";
-		if (safetyRecord.access !== (writer ? "workspace-write" : "read-only") || safetyRecord.authentication !== "cursor-api-key-or-existing-login" || safetyRecord.mode !== (writer ? "print" : "ask") || safetyRecord.sandbox !== "enabled" || safetyRecord.workspaceTrust !== "existing-required" || safetyRecord.sessionReuse !== false) throw new Error(`${label}.safety is invalid.`);
-	} else if (adapterRecord.id === "grok-build") {
+	if (adapterRecord.id === "grok-build") {
 		if (!safety || typeof safety !== "object" || Array.isArray(safety)) throw new Error(`${label}.safety is missing.`);
 		const safetyRecord = safety as Record<string, unknown>;
 		const unknownSafety = Object.keys(safetyRecord).filter((field) => !["access", "authentication", "permissionMode", "tools", "deniedTools", "sandbox", "webSearch", "subagents", "config", "updates", "sessionPersistence"].includes(field));

package/dist/extensions/pi-subagents/test/unit/agent-management.test.ts

@@ -108,55 +108,6 @@ describe("agent management config parsing", () => {
 		assert.equal(JSON.stringify(capabilities).includes("SYSTEM_PROMPT_SENTINEL"), false);
 	});
 
-	it("rejects management attempts to widen the reserved read-only Claude profile", () => {
-		const ctx = { cwd: tempDir, modelRegistry: { getAvailable: () => [] } };
-		const writerRunner = { type: "external-cli", adapter: "claude-code-writer", command: "claude" };
-		const unsafeCreate = handleCreate({ config: { name: "claude-code", description: "Unsafe shadow", scope: "project", runner: writerRunner } }, ctx);
-		assert.equal(unsafeCreate.isError, true);
-		assert.match(readText(unsafeCreate), /reserved for the read-only 'claude-code' adapter/);
-		const unsafeLocalName = handleCreate({ config: { name: "claude-code", package: "custom", description: "Unsafe local name", scope: "project", runner: writerRunner } }, ctx);
-		assert.equal(unsafeLocalName.isError, true);
-		assert.match(readText(unsafeLocalName), /Selection name 'claude-code' is reserved/);
-		const unsafeAlias = handleCreate({ config: { name: "aliased-writer", aliases: ["claude-code"], description: "Unsafe alias", scope: "project", runner: writerRunner } }, ctx);
-		assert.equal(unsafeAlias.isError, true);
-		assert.match(readText(unsafeAlias), /Selection name 'claude-code' is reserved/);
-
-		const readOnlyCreate = handleCreate({ config: { name: "claude-code", description: "Narrow shadow", scope: "project", runner: { type: "external-cli", adapter: "claude-code", command: "claude" } } }, ctx);
-		assert.equal(readOnlyCreate.isError, false);
-		const unsafeUpdate = handleUpdate({ agent: "claude-code", agentScope: "project", config: { runner: writerRunner } }, ctx);
-		assert.equal(unsafeUpdate.isError, true);
-		assert.match(readText(unsafeUpdate), /reserved for the read-only 'claude-code' adapter/);
-		assert.match(fs.readFileSync(path.join(tempDir, ".selesai", "agents", "claude-code.md"), "utf-8"), /adapter: claude-code\n/);
-
-		const writerCreate = handleCreate({ config: { name: "custom-writer", description: "Writer", scope: "project", runner: writerRunner } }, ctx);
-		assert.equal(writerCreate.isError, false);
-		const unsafeAliasUpdate = handleUpdate({ agent: "custom-writer", agentScope: "project", config: { aliases: ["claude-code"] } }, ctx);
-		assert.equal(unsafeAliasUpdate.isError, true);
-		assert.match(readText(unsafeAliasUpdate), /Selection name 'claude-code' is reserved/);
-		const unsafeRename = handleUpdate({ agent: "custom-writer", agentScope: "project", config: { name: "claude-code" } }, ctx);
-		assert.equal(unsafeRename.isError, true);
-		assert.match(readText(unsafeRename), /reserved for the read-only 'claude-code' adapter/);
-	});
-
-	it("rejects create, update, alias, and rename widening for Codex and Cursor", () => {
-		const ctx = { cwd: tempDir, modelRegistry: { getAvailable: () => [] } };
-		for (const [readOnly, writer, command] of [["codex-exec", "codex-exec-writer", "codex"], ["cursor-agent", "cursor-agent-writer", "cursor-agent"]] as const) {
-			const writerRunner = { type: "external-cli", adapter: writer, command };
-			assert.equal(handleCreate({ config: { name: readOnly, description: "Unsafe shadow", scope: "project", runner: writerRunner } }, ctx).isError, true);
-			assert.equal(handleCreate({ config: { name: readOnly, package: `custom-${readOnly}`, description: "Unsafe local name", scope: "project", runner: writerRunner } }, ctx).isError, true);
-			assert.equal(handleCreate({ config: { name: `${readOnly}-alias`, aliases: [readOnly], description: "Unsafe alias", scope: "project", runner: writerRunner } }, ctx).isError, true);
-
-			const readOnlyCreate = handleCreate({ config: { name: readOnly, description: "Narrow shadow", scope: "project", runner: { type: "external-cli", adapter: readOnly, command } } }, ctx);
-			assert.equal(readOnlyCreate.isError, false);
-			assert.equal(handleUpdate({ agent: readOnly, agentScope: "project", config: { runner: writerRunner } }, ctx).isError, true);
-
-			const customName = `custom-${writer}`;
-			assert.equal(handleCreate({ config: { name: customName, description: "Writer", scope: "project", runner: writerRunner } }, ctx).isError, false);
-			assert.equal(handleUpdate({ agent: customName, agentScope: "project", config: { aliases: [readOnly] } }, ctx).isError, true);
-			assert.equal(handleUpdate({ agent: customName, agentScope: "project", config: { name: readOnly } }, ctx).isError, true);
-		}
-	});
-
 	it("lists valid agents and diagnoses malformed agent definitions", () => {
 		const agentsDir = path.join(tempDir, ".selesai", "agents");
 		fs.mkdirSync(agentsDir, { recursive: true });

package/dist/extensions/pi-subagents/test/unit/runtime-agent-registration.test.ts

@@ -255,24 +255,6 @@ describe("runtime agent registration", () => {
 	});
 
 	it("fails closed for builtin and duplicate runtime identities", () => {
-		assert.throws(
-			() => registerAgent({ pi, name: "claude-code", definition: { description: "Unsafe", systemPrompt: "Write.", runner: { type: "external-cli", adapter: "claude-code-writer", command: "claude" } } }),
-			/reserved for the read-only 'claude-code' adapter/,
-		);
-		assert.throws(
-			() => registerAgent({ pi, name: "runtime-writer", definition: { description: "Unsafe alias", systemPrompt: "Write.", aliases: ["claude-code"], runner: { type: "external-cli", adapter: "claude-code-writer", command: "claude" } } }),
-			/Selection name 'claude-code' is reserved/,
-		);
-		for (const [readOnly, writer, command] of [["codex-exec", "codex-exec-writer", "codex"], ["cursor-agent", "cursor-agent-writer", "cursor-agent"]] as const) {
-			assert.throws(
-				() => registerAgent({ pi, name: readOnly, definition: { description: "Unsafe", systemPrompt: "Write.", runner: { type: "external-cli", adapter: writer, command } } }),
-				/reserved for the read-only/,
-			);
-			assert.throws(
-				() => registerAgent({ pi, name: `runtime-${writer}`, definition: { description: "Unsafe alias", systemPrompt: "Write.", aliases: [readOnly], runner: { type: "external-cli", adapter: writer, command } } }),
-				/Selection name .* is reserved/,
-			);
-		}
 		assert.throws(
 			() => registerAgent({ pi, name: "worker", definition: { description: "Bad", systemPrompt: "Bad." } }),
 			/Worker|builtin agent 'worker'|collides with builtin agent 'worker'/i,